Analyze request paths, status codes, and edge locations for CloudFront content.
Keep the records in S3 for later queries.
Which setting is most appropriate?
Enable CloudFront standard logging with an S3 destination.
Detailed explanation
Sign-in auditing is different from CDN request logging.
Sign-in auditing is different from CDN request logging.
Standard logs record distribution requests and can be retained in S3 for analysis.
Standard logs record distribution requests and can be retained in S3 for analysis.
A lifecycle rule manages objects but does not generate CloudFront access logs.
A lifecycle rule manages objects but does not generate CloudFront access logs.
Resolver logs contain DNS queries, not CloudFront distribution requests.
Resolver logs contain DNS queries, not CloudFront distribution requests.
Check official documentation
Compare the following points with the official documentation.
CloudFront standard logging to S3の公式説明を確認する。
What to confirm
CloudFrontアクセスログ、Resolverログ、CloudTrail監査を区別できる。
Key points
- CloudFront standard logging
- S3
- Distribution request
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Access versus DNS logs
CloudFront logs describe content delivery; Resolver logs describe DNS queries.
Retention
S3 storage separates log retention from the CDN's edge-cache lifetime.